Create the Okta enterprise app in Microsoft Entra ID

To let Microsoft Entra ID communicate and exchange data with Okta, you need to create an Okta enterprise app in Microsoft Entra ID.

Before you begin

You need the following to integrate Microsoft Entra ID with Okta:

• An Okta instance

• An Microsoft Entra ID premium instance

• A Microsoft 365 developer account

Start this task

1. Sign in to the Microsoft Azure portal, click the portal menu icon in the top left, and select Microsoft Entra ID.
2. In the right pane, click Enterprise application under Manage.
3. On the Enterprise applications page, click New application.
4. Click Create your own application.
5. In the Name field, enter Okta or your preferred name for the application, and then select Integrate any other application you don't find in the gallery (non-gallery).
6. Click Create.

7. Click Single sign-on in the left menu and click SAML.

   When creating the enterprise app in Microsoft Entra ID first, enter temporary values for Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL) to generate the certificate for download. After you have made Microsoft Entra ID an identity provider in the next section, you can then update the values for Identifier (Entity ID) and Reply URL (Assertion Consumer Service URL).
8. In the SAML Signing Certificate area, select Download for Certificate (Base64), and download the certificate to your computer.

   You need the certificate when you make Microsoft Entra ID an identity provider in Okta.

9. In the Set up Okta area, record the values in these fields:

   • Login URL

   • Microsoft Entra ID Identifier

   You need these values when you make Microsoft Entra ID an identity provider in Okta.

Next steps

Make Microsoft Entra ID an Identity Provider